Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          KL68VxqJhJLkLFjuCNILL41JFkGkF+JKA4656jUsIe8=
Subject key identifier:   94:EE:1F:FF:EF:B9:B7:7F:8D:80:98:6C:1F:6A:01:14:3A:8F:4B:05
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       4FCE4295CB8751A5C5ADB4B69735771A55B4FC67
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:29:10 +0000
ROA not before:           Sat 12 Apr 2025 00:24:10 +0000
ROA not after:            Sat 11 Apr 2026 00:29:10 +0000
asID:                     274726
IP address blocks:        2804:92a8:e000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ce:42:95:cb:87:51:a5:c5:ad:b4:b6:97:35:77:1a:55:b4:fc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:24:10 2025 GMT
            Not After : Apr 11 00:29:10 2026 GMT
        Subject: CN=94EE1FFFEFB9B77F8D80986C1F6A01143A8F4B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:b2:b8:bb:96:86:62:62:a6:ec:5f:09:08:
                    4e:0b:75:d5:b7:ab:fe:a4:d4:83:a3:4a:d8:eb:ba:
                    84:a6:56:45:a4:ee:2c:c7:78:fb:33:73:6a:64:f1:
                    d6:8f:d1:68:42:bd:73:4b:00:a5:59:f6:b9:0c:34:
                    6c:41:65:ea:57:c5:01:0a:1d:98:fc:55:9b:5c:12:
                    68:b7:c6:69:c0:7e:ea:d1:8e:63:eb:bc:75:76:4d:
                    42:d0:4d:c3:de:c6:34:03:85:c6:18:5c:30:66:ea:
                    21:19:05:24:e6:ec:b4:e4:c1:e3:e1:bf:6e:0b:7f:
                    9e:6e:d6:1f:6b:ce:f9:24:1c:54:2b:42:49:19:b8:
                    2d:b3:a6:b1:ef:cc:41:f1:19:cc:82:b2:06:bf:36:
                    0e:da:46:70:6b:74:81:d6:7a:0a:cf:71:2b:25:90:
                    cc:91:fd:18:1f:7f:42:6f:63:a7:22:93:ca:d6:c6:
                    4e:00:d2:71:03:15:0e:e1:74:82:45:5c:a8:f7:3c:
                    e9:b8:79:e2:f4:2f:40:c8:b0:fd:bc:92:e3:04:b4:
                    9d:9a:2f:33:fb:ce:53:5f:3b:ba:f5:5f:7d:a9:53:
                    ad:8f:38:53:de:20:05:0d:9d:b4:e2:df:c2:7c:23:
                    0e:ed:60:6d:be:86:b6:0c:90:cf:c0:9b:3e:63:76:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EE:1F:FF:EF:B9:B7:7F:8D:80:98:6C:1F:6A:01:14:3A:8F:4B:05
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a653030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:21:a1:0e:e9:a7:b1:a6:f5:e6:17:d1:fc:42:1b:05:c9:2b:
         f7:90:f8:ce:c6:ef:c6:c8:fe:c8:87:f8:53:fb:6e:6f:93:b6:
         13:ec:e2:1b:55:13:b3:46:95:e0:49:7f:18:d3:ad:37:22:e8:
         79:2b:79:53:15:e1:fd:f4:16:2e:9b:da:94:c5:c9:ac:ec:0f:
         74:10:6a:26:44:7b:2c:6a:c8:5b:e8:6b:7e:c3:5e:d8:b8:ef:
         c8:ee:70:80:af:54:e7:03:c7:bc:7f:eb:e7:8f:a6:cf:f3:11:
         9f:4c:16:39:c9:bd:8e:f4:0a:bb:20:c7:ec:24:a4:18:60:fb:
         ac:aa:83:52:db:ab:2e:84:8d:3b:1f:2a:7e:3b:3e:58:1e:98:
         01:2f:de:8d:23:40:03:11:62:23:5f:62:f7:9d:ff:a1:e3:59:
         b7:86:84:55:4b:af:b4:c9:d2:77:74:0c:4a:0f:05:53:16:5a:
         c4:1a:4c:dc:4f:bd:dc:d7:36:42:22:a0:6b:5a:38:d7:bd:78:
         a4:6d:7e:29:1b:8f:d0:1a:08:a1:46:68:da:90:98:70:e6:84:
         02:62:b0:52:2f:a8:a1:21:02:a6:c0:a3:8b:68:b3:ca:46:ab:
         c0:39:ee:38:13:08:05:f0:d4:31:4f:d5:35:5a:26:87:80:5f:
         84:47:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:54:19 2025 by rpki-client on console.sobornost.net